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I.  INTRODUCTION 

Cyclic  redundancy  check  codes  (or  CRC  codes)  have  become  the  standard  means  for  insuring 
the  integrity  of  messages  that  have  been  transmitted  over  a  noisy  communications  channel. 
The  sole  purpose  of  these  codes  is  to  detect  transmission  errors  (in  contrast  to  error 
correction  codes  (or  ECC  codes)  which  attempt  to  correct  transmissions  in  errors). 
Sometimes  both  CRC  and  ECC  codes  are  utilized  and  in  that  case  the  burden  is  on  the  CRC 
code  to  detect  errors  that  were  not  correctly  decoded  by  the  ECC  code. 

Unfortunately  even  the  very  best  CRC  codes  cannot  detect  all  transmission  errors.  In 
particular,  all  that  we  as  communication  engineers  can  insist  upon  is  that  the  probability  that 
a  CRC  code  fails  in  its  attempt  to  detect  transmission  errors  is  less  than  some  prescribed 
value.  The  probability  of  CRC  failure  is  called  the  probability  of  undetected  error  and  is 
denoted  by  the  symbol  Pud*  The  thrust  of  this  study  was  concerned  with  finding  an  efficient 
method  of  calculating  this  probability  of  undetected  error  and  then  to  use  this  method  to  find 
good  (or  even  the  best)  CRC  codes. 

It  should  be  emphasized  that  the  value  of  the  probability  of  undetected  error  depends  upon 
the  statistical  model  one  assume  for  the  errors.  Here  we  have  assumed  a  random  error 
model  where  the  probability  of  error  on  every  binary  digit  is  e  (o  <  e  <  1/2)  and  the  errors  on 
different  binary  digits  are  statistically  independent  of  one  another.  This  model,  called  a  binary 
symmetric  channel  (or  BSC)  was  assumed  since 

(a)  it  is  a  model  that  describes  some  commonly  used  modulation/channel/detection 
schemes,  such  as  BPSK  or  QP$K  modulation  in  an  additive  white  Gaussian 
noise  channel  with  an  optimum  receiver, 

(b)  correlated  errors  can  always  be  converted  to  independent  errors  by  interleaving 
at  a  sufficient  depth,  and 

(c)  channel  models  for  correlated  errors  describe  some  specific  type  of  correlation 
and  are  not  general  enough  to  describe  the  general  class  of  non-random  errors. 

It  should  be  realized  that  there  are  many  situations  where  CRC  codes  are  expected  to  detect 
errors  which  are  noi  random  in  nature.  One  such  example  is  when  a  CRC  code  is  used  to 
detect  errors  that  were  miscorrected  by  an  ECC  code.  (The  ECC  decoder  will  produce  burst 
errors).  As  stated  above,  one  manner  for  treating  this  problem  is  to  interleave  to  a  sufficient 
depth  so  that  the  errors  within  a  CRC  block  are  statistically  independent.  If  interleaving  is 
not  used,  however,  the  results  of  this  study  cannot  be  directly  applied. 

Although  any  code  can  be  utilized  as  an  error  detection  code,  a  particular  class  of  cyclic  (or 
shortened  cyclic)  codes  called  CRC  codes,  have  become  the  de  facto  (or  true)  standards. 
These  codes  are  binary  codes  with  generator  polynomials  of  the  form  g(x)  =  (x+1)  p(x) 
where  p(x)  is  a  primitive  irreducible  polynomial  of  degree  (r  -  1).  Thus  g(x)  has  degree  r 
where  r  is  the  number  of  parity  bits  per  block. 

Three  of  these  codes  have  become  international  standards  [11. 

These  codes  are 

CRC- 12 

CRC- 16 


CRC-CCITT 


p(x)  =  X11  +  x2+  1 
p(x)  =  X,5  +  X  +  1 

p(x)  =  X15  +  X14  +  X13  +  X12  +  X4  +  X3  +  X2  +  X  +  l 
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The  natural  block  length  of  a  CRC  code  with  r  parity  bits  and  generator  polynomial 


g(x)  =  (x+1)  p(x) 

is  2r_l  -  l.  Thus  the  CRC- 12  code  has  natural  block  length  2047  and  the  CRC-16  and  CRC- 
CC1TT  codes  have  natural  block  length  32,767. 


Often  the  natural  block  length  is  longer  than  the  desired  block  length  of  the  code.  This  is  not 
a  problem  since  any  code  can  be  "shortened"  to  any  block  length  smaller  than  the  natural 
block  length.  If  one  desires  to  shorten  a  code  by  "x"  digits  one  artificially  sets  (the  first)  "x" 
information  digits  to  zero  and  then  omits  these  "x"  digits  in  transmission  or  storage.  These 
"x"  digits  can  then  be  inserted  without  error  at  the  receiver.  Certainly  the  error  correction 
capability  of  the  shortened  code  is  as  least  as  good  as  that  of  the  original  unshortened  code. 
In  particularly,  shortening  a  code  in  the  manner  described  above  cannot  decrease  the 
minimum  distance  of  the  code  and  even  can  increase  this  minimum  distance.  Surprisingly,  the 
same  statement  cannot  be  made  with  regard  to  the  probability  of  undetected  error  for  the 
code.  In  particular,  it  has  been  found  that  for  a  fixed  channel  bit  error  probability,  the 
probability  of  undetected  error  for  a  shortened  CRC  code  can  be  worse  than  (that  is,  greater 
than)  the  probability  of  undetected  error  for  the  unshortened  code. 


This  surprising  result  is  the  motivation  for  this  study.  Let  Pu<J(n,p)  be  the  probability  of 
undetected  error  for  a  CRC  code  with  (shortened  or  unshortened)  block  length  n  and  channel 
(random)  bit  error  probability  p.  It  is  easy  to  show  that  the  probability  of  undetected  error  for 
an  unshortened  CRC  code  (with  generator  polynomial  g(x)  -  (x+1)  p(x),  degree  [g(x)J  =  r, 
and  natural  block  length  n  •=  2r~ 1  -  1)  is  given  as 

Pud(2r-i-  l,p)  =  2-'£  B;  ( 1  -  2p)‘  -  ( 1  -  p)n. 

i  =  0 


where 


and  n  =  2r  ~  1  -  1. 


i  =0;  i  =  2r  - 1  -  1 

i  =  2r  ~  2  -  1;  i  =  2r  -  2 

otherwise 


It  is  easily  verified  that 

Pud(2f-»-  1,P)<2-' 

for  all  values  of  the  channel  bit  error  probability  p  in  the  range  0  ^  p  ^  1/2.  It  should  be  noted 
that  this  result  holds  for  all  CRC  codes  at  their  natural  block  length  irrespective  of  the  choice 
of  the  primitive  polynomial  p(x).  In  particular,  we  find  that  for  some  choices  of  p(x),  P„d(n,p) 
will  be  less  than  2“r  for  all  shortened  block  lengths  and  for  all  p  in  the  range  0  <,  p  £  1/2  while 
for  other  choices  of  p(x),  P„d(n.p)  can  be  ntuci.  greater  than  2~r  for  some  choices  of  the 
shortened  block  length  and  for  some  values  of  the  cha.  ncl  bit  error  probability  p. 

One  purpose  of  this  study  was  to  find  good  choices  for  the  generator  polynomial  of  CRC 
codes,  that  is,  generator  polynomials  for  which  P„d(n,p)  was  less  than  2-T  for  all  shortened 
block  lengths  and  for  all  values  of  p.  In  the  next  section  we  describe  and  give  a  mathematical 
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justification  for  an  algorithm  for  finding  good  CRC  polynomials.  We  also  describe  fast 
versions  of  this  algorithm  and  give  the  computer  code  for  the  "speed-up”  versions  of  this 
algorithm.  We  then  give  the  results  of  applying  this  algorithm  to  generator  polynomials 
corresponding  to  8,  16,  24  and  32  parity  bits.  All  possible  generator  polynomial  corresponding 
to  8  and  16  parity  bits  and  some  of  the  generator  polynomials  corresponding  to  24  and  32 
parity  bits  were  tested.  Also  results  for  an  incomplete  running  of  the  algorithm  were 
compared  with  results  for  a  full  running  of  the  algorithm.  Also,  a  hardware  tester  for 
polynomial  of  higher  degree  is  described.  The  report  ends  with  a  set  of  conclusions. 


II.  CALCULATING  THE  PROBABILITY  OF  UNDETECTED  ERROR  FOR 
SHORTENED  CRC  CODES 

An  unshortened  cyclic  code  C  of  block  length  n  may  be  defined  in  terms  of  a  generator 
polynomial  g(x),  or  equivalently  in  terms  of  its  parity-check  polynomial ,  h(x).  The  two 
polynomials  are  related  by  the  equation 

g(.\)h(x)  =  Xn-  1.  ([) 

For  binary  cyclic  codes,  the  coefficients  of  the  polynomials  are  either  0  or  1 ,  and  coefficient 
addition  is  performed  modulo  2.  We  can  therefore  equate  coefficient  subtraction  and  addition, 
and  replace  ( 1 )  with  the  equivalent  relation 

g(x)h(x)  =  xn  + 1,  (2) 

Let  the  degree  of  the  generator  polynomial,  deg|g(x)|  =  r.  Let  k  =  n  -  r. 

We  can  therefore  give  two  equivalent  definitions  for  vectors  which  are  in  the  code.  A  vector 
of  n  bits,  (c0.  C| . cn., },  is  a  code  vector  if  and  only  if  the  code  polynomial 

n  -  1 

cM*  X  c‘xi 

i-0 

is  the  generator  polynomial  multiplied  by  a  polynomial  of  degree  (k  -  1)  or  less  [2].  That  is. 
c(x)  *  g(x)  n(x )  where deg(a(x)|  £  k  -  1.  ($) 

Equivalently,  c(x)  is  a  code  polynomial  if  and  only  if 

c(x)h(x)sO  modulo  (x“  +  li  (4) 

since 

c(x)  h(x)=  atx)g(x)  h(x)=  a(x)(xn  +  l)sO  modulo (xn  +  1). 

Since  there  are  a  total  of  k  arbitrary  coefficients  in  a(x),  the  code  takes  k  arbitrary  bits  of 
information  and  appends  r  =  n  -  k  bits  of  redundancy,  is  referred  to  as  an  (n,k)  code,  and  has 
2k  code  words. 

The  dual  code ,  D,  of  the  cyclic  code,  C,  is  defined  by  swapping  the  roles  of  g(x)  and  h(x). 
That  is,  the  dual  code,  D,  has  generator  polynomial  h(x).  Since  the  degree  of  h(x), 

deg[l»(x)]  =  k,  (5) 

and  the  block  length  remains  unchanged,  the  dual  code,  Z>,  is  an  (n.r)  code,  and  has  2r  code 
words. 

For  any  (n,m)  binary  linear  code  C,  the  probability  of  undetected  block  error.  Pud.  is  given  in 
terms  of  the  random  bit  error  probability,  p,  by 
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p»i*  i  AiPtipr- 

•  =  i 


(6) 


where  A;  is  the  number  of  code  words  with  exactly  i  ones  in  the  code  C  |3|.  The  numbers 
{ A, )  arc  referred  to  as  the  weight  enumerators  of  the  code  C.  Let  B;  be  the  number  of  code 
words  with  exactly  i  ones  in  the  dual  code.  D.  of  the  code  C. 

By  use  of  the  MaeWillinnVs  Identities  |4|,  we  can  express  Pud  in  terms  of  the  {Bj}.  That  is. 


P«i  =  2r£  Bt(l-2pMl-pr 

i  «0 


(7) 


Since  we  desire  error  detection  codes  with  high  code  rates,  k  is  generally  much  larger  than  r 
for  practical  error  detection  codes,  and  it  is  therefore  much  easier  to  determine  the  weight 
distribution  of  the  2r  code  words  in  the  dual  code. 

CRC  codes  ore  specialized  cyclic  codes  where  the  generator  polynomial  has  the  form 

g(x)  =  (x+  l)p(x)  (8) 


where  p(x)  is  n  primitive  irreducible  polynomial  of  degree  r  -  I.  Unshortcncd  CRC  codes 
huve  block  lengths  n,  where  n  =  2<r~  i>  -  l.  The  dual  of  a  CRC  code  must  then  have  a 
generator  of  the  form 


gi(x) 


_ &!.  +  1_ 

(x+  l)p(x) 


(9) 


Let 


h^x)  =  p(x) ,  and  g2(x)  - 

P(x)  (10) 

be  the  parity  check  and  generator  polynomials,  respectively,  of  the  dual  of  another  code.  C2. 
Since 

gix)  =  (x+  l)g,(x)%  (U) 

any  code  word  in  the  dual  of  the  code  C2.  defined  by  h2(x)  and  g2(x),  must  be  in  the  dual  o»' 
the  CRC  code  by  (3).  We  obtain  the  code  words  in  the  dual  of  the  unshortcncd  CRC  code  by 
first  obtaining  all  code  words  in  the  dual  of  C2. 

One  way  to  generate  the  code  words  of  a  given  cyclic  code  is  through  the  use  of  a  linear 
feedback  shift  register  (LFSR),  whose  feedback  is  wired  according  to  the  coefficients  of  the 
parity-check  polynomial  for  that  code  (5).  See  Figure  I.  An  arbitrary  code  word  is  produced 
by  initially  loading  the  LFSR  with  a  set  of  information  digits,  and  then  the  n-tuplc  produced  at 
its  output  when  shifting  the  register  is  a  code  word.  Since  the  output  of  the  register  is 
determined  recursively  from  the  initial  loading  of  the  register,  the  2r " 1  code  words  in  the 
dual  of  C2  are  produced  by  considering  all  possible  initial  (r  -  1  Ftuplc  loadings  of  the  shift 
register. 


NVc  make  use  of  the  fact  that  the  parity  cheek  polynomial  for  C 2  is  a  primitive  irreducible 
polynomial.  Sequences  produced  by  LFSRs  whose  feedback  is  "determined  by  a  primitive 
irreducible  polynomial  are  known  as  m-sequences,  and  their  usefulness  in  n  variety  of 
communications  applications  is  well  known.  Certain  properties  of  m-sequences  have  been 
established  in  the  litcrature|6||7|.  In  particular,  we  note  that  a  shift  register,  wired  according 
to  a  primitive  polynomial  p(x)  of  degree  r  1  and  initialized  with  some  non-zero  value, 
produces  a  sequence  with  period  2<f~')  -  I  |6||7).  Let 

i  -  t 

p(x)  "  Z  Pj  x' 

isl)  ,  (12) 

he  the  primitive  irreducible  polynomial  in  question,  and  let  the  shift  register  be  loaded  with 

initial  contents  (st  _  2,  s,  _  j . sq).  Each  time  the  shift  register  is  clocked,  it  outputs  mit 

the  current  value  of  xjj  and  updates  the  shift  register  contents  according  to  the  current  value  of 
x„  by  the  equations 

|  *r_i  =  xopr_|. 

jx,  =  x,.,  ©  x0pui  :  i  < r -  2,  (,3) 

where  the  ©  indicates  addition  modulo  2.  The  output  of  the  LFSR.  being  periodic,  then 
satisfies 


nit  =  mit2.  for  alii.  ,l4) 

If  the  initial  contents  of  the  shift  register  are  all  zero,  then  the  shift  register  will  produce  the 
all  zero  code  word.  With  any  non-zero  initial  contents,  the  shift  register  produces  a  code 
word  which  is  one  cycle  of  the  periodic  output  of  the  shift  register.  All  cyclic  shifts  of  the  non¬ 
zero  code  word  produced  must  be  in  the  code  by  (4).  Since  this  code  word  is  one  cycle  of  a 
sequence  whose  period  is  equal  to  the  length  of  the  code  word,  these  distinct  cyclic  shifts 
account  for  2(r  ■’  -  1  of  the  cotie  words.  Along  with  the  all  z.cro  code  word,  this  accounts  for 
all  2(r',)code  words  corresponding  to  all  2(r-,)  possible  initial  loadings  of  the  shift 
register.  We  may  then  consider  the  code  words  produced  to  be  those  that  one  would  observe 
by  looking  through  a  window,  that  is,  a  shift  register  without  feedback,  of  width  equal  to  the 
number  of  digits  in  a  codeword  filled  with  the  output  of  a  LFSR.  Sec  Figure  2.  We  note  that 
the  number  of  ones  in  this  window  is  the  Hamming  weight  of  a  given  code  word  in  the  dual  of 
the  code  C2.  By  counting  the  code  words  of  various  weights,  we  can  calculate  the  probability 
of  undetected  error  for  the  dual  of  the  code  C2  using  (6)  or  the  code  C2  using  (7).  Let 

Wj  =  the  number  of  code  words  of  weight  i  in  the  dual  of  the  code  C2.  ( 1 5) 

We  note  that  all  non  zero  code  words  in  the  dual  of  the  unshortened  code  C2  must  have  the 
same  weight,  and  by  appealing  to  properties  of  m-sequences  16|,  we  know  that  this  weight  is 
equal  to 

(16) 


We  now  seek  to  enumerate  the  other  code  words  in  the  dual  of  the  unshortened  CRC  code. 
We  consider  the  all  one  code  word. 
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n  -  l 

d(x)  =  X  x‘ 

i  =  0  .  (17) 


Since 

n  -  1 

h(x)d(x)  =  p(x)(x  +  l)£  x'  =  p(x)(xn  +  l)sO  modulo(xn  +  lK 
i  =  o 

d(x),  the  all  one  code  word,  is  in  the  dual  of  the  CRC  code.  Since  the  dual  of  the  CRC  code  is 
linear,  the  modulo  2  component  sum  of  any  two  code  words  must  also  be  a  code  word.  When 
summing  the  all  one  code  word  with  the  code  words  in  the  dual  of  the  unshortened  code  C2. 
we  complement  the  binary  digits,  creating  code  words  of  weight 

(2r-i_i)_(2'-2_i)  =  2'-2  (18) 

which  must  be  distinct  from  the  code  words  in  the  dual  of  the  unshortened  code  C2.  We  have 
therefore  accounted  for  all  2r  code  words  in  the  dual  of  the  unshortened  CRC  code. 

If  we  let 

bi  =  the  number  of  code  words  of  weight  i  in  the  dual  of  the  CRC  code,  (19) 


then 


bi  =Wi  +  wn_i,  (20) 

where  n  is  the  block  length  of  the  code. 

Since  all  unshortened  CRC  CGdes  have  the  same  weight  structure  regardless  of  the  choice  of 
the  primitive  irreducible  polynomial  of  degree  r  -  1,  they  all  perform  identically  with  respect  to 
their  error  detection  capability.  For  unshortened  CRC  codes, 

p^p)=2-(i  +(1  -On  -2Pr2-4(2->  -hi  -2Pf,z)-(i  -pt2"1-1, 

(21) 


which  monotonically  increases  for  0  <  p  <  Pud  may  then  be  bounded  by 


p4)  =  2--(2),-2’-IS  2-  (22) 

However,  the  choice  of  primitive  polynomial  can  be  critical  for  shortened  CRC  codes.  For 
some  shortened  CRC  codes,  Pud  does  not  monotonically  increase  for  0  <,  p  £  1/2  but  rather 
displays  peaks  which  can  be  several  orders  of  magnitude  larger  than  Pud(l/2).  See,  for 
example.  Figure  11. 

Shortening  a  code  by  x  bits  may  be  thought  of  as  using  x  less  bits  of  information  by  setting  x 
of  the  information  bits  all  equal  to  zero  and  using  the  same  amount  of  redundancy.  The 
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shortened  code  can  be  thought  of  conceptually  as  noiselessly  transmitting  x  all  zero  bits  and 
the  noisy  transmitted  message,  and  decoding  as  before  after  reinsertion  of  the  deleted  all 
zero  bits.  The  code  then  becomes  an  (n  -  x,  k  -  x)  code. 

In  the  dual  of  the  shortened  code  CRC,  the  roles  of  information  and  redundancy  are 
interchanged. 

The  dual  code  still  has 

(n-  x)  -(k-x)  =  n-k  =  r 

bits  of  information,  but  only  k  -  x  bits  of  redundancy.  The  shortened  dual  code  may  be  thought 
of  conceptually  as  having  truncated  redundancy  bits.  By  conceptually  aligning  the  shortened 
dual's  truncated  redundancy  with  the  shortened  code's  all  zero  bits,  orthogonality  of  the 
shortened  code  and  its  shortened  dual  is  preserved. 

As  before,  we  can  generate  the  code  words  in  the  dual  of  the  shortened  code  C2  using  a 
LFSR  as  in  Figure  1  by  loading  it  with  all  possible  combinations  of  r-  1  information  bits,  only 
now  outputting  n  -  x  total  bits.  We  therefore  observe  all  code  words  through  an  appropriately 
down-sized  window  as  in  Figure  2. 

As  before,  we  obtain  the  weight  distribution  of  the  dual  of  the  shortened  CRC  code  from  the 
dual  of  the  shortened  code  C2.  The  shortened  all  one  code  word  of  (17)  is  added  to  all  code 
words  of  the  dual  of  the  shortened  code  C2.and  equations  (19)  and  (20)  still  hold  for  the 
shortened  block  length.  However,  the  weight  structure  of  the  dual  codes  is  now  irregular,  and 
depends  heavily  on  the  choice  of  primitive  polynomial.  We  therefore  painstakingly  produce  all 
code  words  in  the  dual  of  the  shortened  code  C2.  counting  the  number  of  code  words  of 
various  weights  produced.  We  may  recursively  account  for  all  the  code  words  in  the  dual  of 
the  shortened  code  C2  as  follows. 

1.  Initially,  we  have  not  seen  any  code  words  of  any  weight,  so  we  set  Wj  =  0  for  all 
i. 

2.  We  account  few  the  all  zero  code  word  by  setting  w0  =  1. 

3.  We  produce  a  code  word  by  filling  a  window  of  length  equal  to  the  block  length 
with  the  output  of  a  linear  feedback  shift  register  LFSR1,  counting  the  number  of 
ones  as  they  are  inserted  into  the  window. 

4.  2r  - 1  -  1  times,  we 

a.  account  for  the  weight  i  of  the  current  code  word  seen  by  incrementing  wt,  and 

b.  produce  a  new  code  word  by  shifting  the  registers  of  Figure  2,  keeping  track 
of  its  weight  by  noting  the  number  of  ones  entering  and  exiting  the  window. 

We  can  easily  keep  track  of  the  input  and  output  of  ones  from  the  window.  The  output  of 
LFSR1  enters  the  window.  If  we  note  the  initial  state  of  LFSR1  before  producing  the  first 
code  word,  then  a  second  linear  feedback  shift  register,  LFSR2,  initialized  in  the  same  way, 
will  produce  the  sequence  which  is  output  from  the  window.  See  Figure  3.  Since  the  weight 
enumeration  of  the  dual  of  the  shortened  code  C2  is  the  time  consuming  part  of  the  evaluation 
of  a  given  CRC  code,  we  have  concentrated  on  optimizing  the  algorithm  which  produces  the 

W;. 
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r-2 

Switch  pi  is  closed  if  die  corresponding  coefficient  in  P(  x)  -  £  pi  x*  is  non-zero. 

i  =o 


Figure  I.  Linear  Feedback  Shift  Register  (LFSR)  for  Operation  Modulo  P(x). 


*.  Code  Word  Viewer  for  Dual  of  Code  C2. 


LFSR  l  I 


i 

i 

,  entrance 


I 


Window 


LFSR2 


Initialize  both  LFSRs  with  the  same  non-zero  contents  and  shift  LFSR1  the  block  length,  n, 
t  ines.  From  then  on,  the  outputs  given  by  shifting  LFSR1  and  LFSR2  simultaneously  gives 
the  input  and  output  of  the  window.  .  pectively. 


Figure  3.  Code  Weight  Viewer  for  Dual  of  Code  C2. 
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III.  PROGRAM  FOR  DETERMINING  WEIGHT  DISTRIBUTION  AND 
ELIMINATING  IMPROPER  CRCS 

This  section  describes  a  computer  program  that  was  written  to  aid  in  the  evaluation  of  CRCs 
generated  from  various  primitive  polynomials.  Most  of  the  computer  code  that  was  written  is 
in  the  C  programming  language.  C  is  a  relatively  fast  language  that  incorporates  many  of  the 
useful  bit  operators  needed  in  the  computation  of  weight  enumerators.  Included  at  the  end  of 
this  section  is  a  listing  of  C  code  which  calculates  the  weight  enumerators,  evaluates  the 
probability  of  undetected  error,  Pud(p),  formula  (7)  given  in  the  section  II,  and  eliminates 
those  CRCs  which  exhibit  a  value  of  Pud(p)  greater  than  Pud(l/2).  CRCs  which  exhibit  a 
value  of  P„d(p)  for  p  <  1/2  greater  than  Ppd(l/2)  are  called  improper.  In  the  next  section,  we 
provide  68000  assembler  code  for  the  critical  loop  which  calculates  the  weight  enumerators. 

To  streamline  operation  of  the  program  with  a  minimum  of  user  intervention,  we  designed  this 
program  to  read  a  file  of  primitive  polynomials,  test  CRCs  based  on  them  at  a  variety  of 
consecutive  block  lengths,  and  write  an  output  file  of  polynomials  which  were  proper  at  the 
block  lengths  considered.  The  program  prompts  the  user  for  the  minimum  probability  of  bit 
error  to  be  considered,  the  number  of  values  of  the  probability  of  bit  error  to  be  considered  per 
decade,  and  the  range  of  block  lengths  to  be  considered.  The  program  uses  log  scaling  of  the 
probability  of  bit  error,  multiplying  the  current  probability  of  bit  error  by  a  constant  to  get  the 
next  probability  of  bit  error. 

The  program  allocates  memory  to  hold  the  wj  of  the  previous  section.  The  polynomials  under 
consideration  are  assumed  to  reside  in  a  Hie  called  "polys"  in  the  current  directory.  The  main 
loop  of  the  program  reads  the  next  polynomial  in  the  Hie  and  processes  it,  and  continues  in 
this  fashion  until  the  end  of  the  file  is  reached. 

A  polynomial  is  processed  by  first  assuming  that  it  has  not  been  rejected,  and  assigning  it  to 
the  variable  "prim_poIy".  The  degree  of  the  polynomial  is  determined  with  the  help  of  another 
variable  called  "poly".  The  weight  enumerators  of  CRCs  based  on  the  polynomial  are 
produced  at  each  block  length  starting  at  the  minimum  block  length  and  (7)  is  evaluated  at  all 
values  of  bit  error  probability  considered,  until  cither  the  polynomial  is  rejected  or  the 
maximum  block  length  has  been  completed. 

In  producing  the  weight  enumerators,  it  is  convenient  to  represent  the  contents  of  the  LFSR 
of  Figure  1  of  the  previous  section  within  the  variable  "shiftO",  with  x0  being  the  least 
significant  bit,  and  the  feedback  in  the  variable  "poly",  with  being  the  least  significant  bit. 
We  note  that  the  feedback  is  given  by  the  primitive  polynomial  shifted  one  position  toward 
the  least  significant  bit,  with  the  least  significant  bit  discarded. 

The  Wj  enumeration  begins  by  initializing  wj  =  0  for  all  0  <  i  <  n  and  w0  =  1.  To  get  the 
weight  of  the  first  code  word,  produced  by  the  LFSR  shiftO  initialized  with  die  value  poly,  we 
count  the  number  of  ones  output  by  the  LFSR  in  the  first  n  shifts,  where  n  is  the  block  length. 
To  test  whether  the  output  of  the  LFSR  is  a  one  and  therefore  if  there  is  any  feedback,  we 
test  to  see  if  the  least  significant  bit  of  shiftO  is  a  one.  If  so,  the  weight  is  incremented  and 
the  next  contents  of  the  LFSR  are  obtained  by  shifting  it  one  position  and  bit-wise  XORing  in 
the  feedback,  poly.  If  the  least  significant  bit  of  shiftO  is  not  a  one,  there  is  no  feedback  and 
no  contribution  to  the  weight,  and  the  next  contents  of  the  LFSR  are  obtained  by  shifting  it 
one  position.  We  note  that  the  initial  value  given  to  shiftO  is  the  contents  that  it  would 
contain  after  having  the  previous  contents  equal  to  1.  After  producing  the  weight  of  the  first 
code  word,  we  increment  the  number  ws  corresponding  to  this  weight. 
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To  produce  the  weights  of  the  remainder  of  the  code  words,  we  now  shift  both  LFSRs,  shiftO 
and  shift  1,  for  2r  - 1  -  2  iterations.  Shift  1  is  initialized  with  the  same  value,  poly,  that  shiftO 
was  originally  initialized  with,  and  its  output  represents  bits  exiting  the  window  of  Figure  3  of 
the  previous  section.  The  output  of  shiftO  represents  the  input  to  the  window.  Whenever 
shiftO  outputs  a  one,  we  increment  the  weight  of  the  window,  and  whenever  shiftl  outputs  a 
one,  we  decrement  the  weight  of  the  window.  After  both  LFSRs  have  shifted,  we  increment 
the  number  Wj  corresponding  to  the  weight  of  the  current  code  word  in  the  window.  When  the 
contents  of  shiftl  equal  1,  it  has  completed  the  desired  number  of  iterations,  a  total  of  its 
sequence  period  -  1 . 

After  completing  the  weight  enumeration,  we  calculate  Pu<i(p)  using  formula  (7)  of  the 
previous  section  for  each  value  of  p  from  p  =  1/2  down  to  the  minimum  value  and  compare 
Pud(p)  to  1.0001  *  Pud(l/2).  If  the  CRC  is  improper,  we  print  an  appropriate  message  to  the 
output  file  "stderr",  and  reject  the  polynomial.  If  the  CRC  is  proper  at  all  block  lengths  and 
values  of  p  considered,  we  write  it  to  the  output  file  "stdout". 

When  evaluating  formula  (7),  the  first  term  is  a  polynomial  in  the  variable  (l-2p).  We 
evaluate  this  polynomial  in  n  multiplications  and  additions  using  Homer's  rule  [8]. 
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III.l  (LISTING)  C  PROGRAM  FOR  ELIMINATING  IMPROPER  POLYNOMIALS 

#include  <stdio.h> 

#include  <math.h> 

#include  <malloc.h> 

unsigned  int  *w;  /*  jack’s  w  */ 

main() 

{ 

register  int  shiftO^hiftl; 
register  unsigned  int  poly; 
unsigned  int  ones; 
int  primjpoly; 
int  poly_deg; 
int  npeindecade; 
double  pe; 
double  pmin,pmax; 
double  logseale; 
double  peak; 
double  pud; 
double  bsum; 
int  n; 

int  min_block,max_Wock; 
int  reject; 
inti; 

double  blkpudmax; 

FILE  *polyp,*fopen(); 
void  *  mallocO; 
double  pow(); 
double  logO>exp(); 

pmax  =  (double  )  0.5; 

fprintf(stderr,"enter  minimum  probability  of  bit  error  Pe:"); 
fscanf(stdin,M%lF,&pmin); 

fprintf(stderr,"enter  points  to  consider  per  decade:"); 

fscanf(stdin,”%d",&nperdecade); 

fprintf(stderr,  "enter  minimum  size  block:"); 

fscanf(stdin,M%d",&min_bkx:k); 

fprintf(stderr, "enter  maximum  size  block:"); 

fscanf(stdin,"%d",&max_block); 

logseale  -  pow((double  )  10.0,  ( (double  )  1.0  /  (double  )  nperdecade) ); 
fprintf(stderr,"  logseale  =  %.6e\n",  logseale); 

fprintf(stdout, "Surviving  polynomials  for  block  size  =  %d  to  %d\n",min_blockanax_block); 

if  ((w  =  (int  *)  malloc((max_block+l)  *  sizeof(int )))  —  NULL) 

( 

fprintf(stderr," sorry,  couldn't  malloc  the  w\n”); 
exit(l); 

) 


f*  begin  and  end  of  window  */ 

/*  fast  polynomial  holders  */ 

/*  counter  of  ones  in  window  */ 

/*  primitive  read  from  file  */ 

/*  degree  of  primitive,  TBD  */ 
f*  num  of  points  to  plot  per  decade  */ 
/*  prob  bit  error  */ 

/*  min  and  max  prob  of  bit  error  */ 
t*  10  M  1/nperdecade  */ 

/*  1.0-  2.0  *  pe  */ 

/*  block  prob  of  undetected  error  */ 

/*  ltolds  sum  of  Bi  *  ((l-2p)  M  i)  */ 

/*  block  length  */ 

/*  range  of  block  lengths  considered  */ 


if  ((polyp  =  fopenCpolys’V'r"))  ==  (FILE  *)  0) 

< 

fprintf(stderr," sorry,  error  opening  polynomials  file\nn); 
exit(2); 

} 

while  (fscanf(polyp,"%oM,&prim_poly)  !=  EOF) 

reject  =  0; 
poly  =  prim_poly, 

f*  determine  degree  of  polynomial  */ 

for  (poly_deg  =  -1;  poly  !=  0 ;  poly  »=1,  poly_deg++) ; 

fprintf(stderr, "polynomial  %o  degree  %d\n",prim_poly,poly_deg); 

poly  =  prim_poly»l; 

for  (n  =  min_block;  Ireject  &&  n  <=  max_block;  n++) 

1 

blkpudmax  =  pow((double)2.0,  (double)  (-poly_deg-l)); 
blkpudmax  -=  pow((doublc)  0.5,  (double  )  n); 

w[0]  =  1; 

for  (i  =  1;  i  <=  n;  i++) 
w[i]  =  0; 

/*  count  ones  in  initial  pipeline  */ 

for  (i=0,  shiftO  =  poly,  ones  =  0;  i<n  ;  i++) 

1 

if  (shiftO  &  1) 

( 

shiftO  »=1; 
shiftO  A=  poly; 
ones++; 

} 

else  shiftO  »=1; 

) 

w[ones]++; 

/*  run  shiftO  and  shiftl  for  all  but  one  of  the  m  sequence  */ 
/*  shiftO's  output  enters  pipeline  */ 

/*  shift  l's  output  exits  pipeline  */ 
for  (shiftl  =  poly;  shiftl  !=  1 ; ) 

{ 

if  (shiftO  &  1) 

{ 

shiftO  »=1; 
shiftO  A=  poly; 
ones++; 

} 

else  shiftO  »=1; 
if  (shiftl  &  1) 

( 

shiftl  »=1; 
shiftl  A=  poly; 
ones--; 
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} 

else  shiftl  »=1; 
w[ones]++; 

} 

fprintf(stderr,"%dVn",n); 

for  (pe  =  pmax;  pe  >=  pmin  ;  pe  /=  logscale) 

pcalc  =  1.0  -  (2.0)  *  pe; 

/*  calculate  B  sum  via  Homer’s  rule  */ 
bsum  =  (double )  (w[0]  +  w[n]);  /*  ie  Bn  */ 
for  (i  =  n  -  1;  i  >=  0;  i-) 

( 

bsum  *=  pcalc; 

bsum  +=  ((double  )  (w[i]  +  w[n-i])); 

} 

I*  calculate  pud  */ 

pud  =  bsum  /  pow(2.0,  (double)  (poly_deg+l)); 

pud  -=  pow(1.0  -  pe,  (double  )  n); 

if  ((pud  >  1.0e-13)  &&  (pud  >  1.00001  *blkpudmax)) 

fprimf(stderr,"rcjected  %o  at  blocklength  =  %d  pe  =  %.6e  pud  =  %.6eNn,,,prim_poly,n,pe,pud); 

fprimf(stderr,"bounder  for  pud  -  %.6e\n",blkpudmax); 
reject  =  1; 

} 

if  (pud  <  1.0e-13  II  reject)  break; 

) 

} 

if  (n==max_block+ 1 ) 

fprintf(stdout,"%oW\prim_poly); 

fclose(polyp); 

free(w); 

fprintf(stderr,"all  doneVn"); 
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IV.  ASSEMBLER  CODE  FOR  CRITICAL  SUBROUTINE 

In  this  section,  we  describe  code  written  in  the  Motorola  68000  microprocessor  assembler 
language  which  improved  execution  time  of  the  most  time  consuming  part  of  the  algorithm  by 
a  factor  of  2.  The  assembler  code  is  on  the  next  page  of  this  section.  The  time  consuming 
part  is  the  calculation  of  the  Wj  of  section  III.  We  optimized  the  instruction  branching  attd  the 
shifting  of  the  LFSRs  more  than  is  possible  in  the  C  programming  language. 

We  desired  fast  shifting  of  the  LFSRs.  In  the  C  programming  language,  we  must  first  test 
the  least  significant  bit  of  a  LFSR  before  shifting  to  determine  the  output  and  feedback 
operation.  In  assembler  code,  we  can  immediately  shift  the  register  and  simultaneously 
perform  an  implicit  test  on  its  least  significant  bit,  since  a  microprocessor  condition  code  is 
set  if  the  least  significant  bit  was  a  one.  Therefore,  we  follow  the  shift  with  a  conditional 
branch  and  the  code  to  perform  had  the  bit  been  a  one. 

We  also  incorporate  the  initial  zeroing  of  the  Wj  in  the  loop  which  produces  the  first  code 
word.  Since  we  count  out  a  number  equal  to  the  block  length  in  producing  the  first  code  word, 
it  is  natural  to  clear  as  i  is  being  counted.  The  initialization  loop  is  displayed  as  a  flow 
chart  in  Figure  4  of  this  section. 

In  Figure  5,  we  display  a  flow  chart  for  the  loop  which  enumerates  all  the  Wj  for  i  >  0.  We 
improve  the  execution  speed  of  the  w  address  calculation  by  maintaining  an  address  counter 
which  increments  or  decrements  by  the  number  of  bytes  in  the  iong  integers  used  to  represent 
the  wj. 

At  the  beginning  of  the  subroutine,  we  assume  that  to  the  global  variable  _poly  contains  the 
value  of  the  feedback  of  the  LFSRs,  as  in  the  previous  section,  and  that  the  global  variable  _n 
contains  the  current  block  length  under  consideration. 
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IV.l  (LISTING)  68000  ASSEMBLER  SUBROUTINE  FOR  DETERMINING  WEIGHT 

Enumerators 


public 

^find_w 

_find_w: 

link 

a6,#.l5 

movcm.l 

.16,-(sp) 

Ifsrl 

cqur 

d7 

Ifsr2 

cqur 

d6 

numoncs 

equr 

d5 

fdbkr 

equr 

d4 

blkcnt 

cqur 

a3 

movc.l 

#0,blkcnl 

move.l 

blkcnt, numoncs 

movc.l 

.poly.fdbkr 

;  put  feedback  in  register 

movc.l 

fdbkr, Ifsrl 

;  set  Ifsrl  initially  to  second  of  sequence 

movc.l 

fdbkr,lfsr2 

;  set  Ifsi2  initially  to  second  of  sequence 

movc.l 

_w,aO 

;  put  address  of  w  in  aO 

ncxli: 

movc.l 

blkcnt.dO 

;  move  block  count  to  dO 

asl.l 

#2.d0 

;  multiply  by  4  to  get  long's  address  offset 

clr.l 

(aO.dO.l) 

;  clear  offset  address 

lsr.l 

#l,lfsrl 

;  shift  fust  LFSR 

bcc 

addtoi 

;  if  no  carry,  we're  done 

cor.l 

fdbkr.  Ifsrl 

;  otherwise,  add  in  the  feedback 

addq.l 

#4,numoncs 

;  and  add  one  to  the  number  of  ones  in  window 

addtoi: 

addq.l 

#1, blkcnt 

;  increment  the  block  count 

cmp.l 

_n,blkcnt 

:  check  to  see  if  window  is  done 

bcs 

ncxti 

;  if  not,  go  around  again 

movc.l 

_w,a0 

;  put  address  of  w  in  aO 

movc.l 

#l,(aO) 

;  the  all  zero  word  conveniently  goes  here 

wincrcm: 

addi.i 

#l.(aO,d5.1) 

;  increment  wfaddress] 

cmp.l 

#l,lfsr2 

;  check  if  done  when  lfsr2  a  1 

bcq 

findone 

;  if  so  we're  completely  done  here 

lsr.l 

#l,lfsrl 

;  in  each  iteration  we  enter  window  with  output  of  Ifsrl 

bcc 

shift2nd 

;  if  no  output,  go  shift  LFSR2 

cor.l 

fdbkr  .Ifsrl 

;  else  add  in  feedback. 

addq.l 

#4,numoncs 

;  one  enters  window 

shift2nd: 

lsr.l 

#l,lfsr2 

;  shift  of  LFSR2 

bcc 

wincrcm 

;  if  done  update  count 

cor.l 

fdbkr,lfsr2 

;  otherwise  add  feedback. 

subq.l 

#4^iuntoncs 

;  one  leaves  window 

bra 

wincrcm 

;  so  enumerate  unchanged  count 

findone: 

movcm.l 

(sp)+,.16 

unlk 

a6 

rts 

.15 

cqu 

0 

.16 

reg 

d4/d5/d6/d7/a3 
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V.  SAMPLING  THE  WEIGHT  DISTRIBUTION 

As  the  number  of  CRC  bits  becomes  large,  the  number  of  code  words  in  the  dual  code,  the 
number  of  potential  polynomials,  and  the  number  of  shortened  block  lengths  all  become  large, 
prohibiting  timely  analysis  of  all  the  various  possibilities.  In  this  section,  we  investigate  the 
possibility  of  extrapolating  the  performance  of  n  given  shortened  CRC  code  by  sampling  the 
weight  distribution  of  a  subset  of  the  code  words.  For  CRCs  with  very  many  parity  bits,  this 
may  be  the  only  reasonable  alternative  until  some  closed  form  weight  distribution  formula 
becomes  available.  Unfortunately,  our  method  seemed  to  give  poor  predictions  of  the  code 
performance,  even  with  relatively  large  sample  sizes. 

We  note  that  because 


bj  *  Wi  +  wn  .  j 

the  (bj)  are  symmetric  about  i  »  n/2.  that  is 
bj  =  bn  _  j. 

Therefore  the  true  mean  weight  and  any  sample  mean  weight  found  by  our  method  equals  n/2. 
We  sample  a  subset  of  the  code  words  and  hope  to  learn  more  about  their  weight 
distribution's  higher  order  statistics.  We  conjecture  that  a  distinguishing  characteristic  of 
improper  CRCs  lies  in  the  "tail"  of  the  distribution  of  the  weights,  and  therefore  we  seek  to 
compare  the  distribution  of  the  tail  of  the  weights  to  other  known  probability  distributions. 

As  shown  in  the  Figures  of  section  IX  on  24  bit  CRCs,  different  primitive  degree  23 
polynomials  can  lead  to  differences  on  the  order  of  8  decades  in  error  detection  performance  at 
critical  block  lengths  and  probabilities  of  bit  error.  Our  sampling  tests  were  performed  on  the 
23  bit  polynomials  discussed  in  section  IX,  where  we  have  plotted  their  performance.  There 
are  a  total  of  16,777,216  code  words  in  each  of  the  codes  considered.  We  tried  samples  of 
20.000  code  words  and  could  find  no  credible  information  supplied  in  the  samples  which  would 
help  to  characterize  the  polynomials.  We  therefore  increased  our  sample  size  to  2,000,000 
code  words,  and  still  seemed  to  make  poor  predictions  of  the  tail  of  the  weight  distribution. 

We  had  hoped  that  the  observed  subset  of  code  words  would  have  roughly  the  same  weight 
distribution  as  the  complete  set  of  code  words.  If  so,  we  could  take  the  observed  number  of 
code  words  of  a  given  weight  in  the  subset  and  multiply  by  a  constant  ratio  to  find  the 
corresponding  weight  enumerator  in  the  complete  set. 

The  following  charts  compare  the  worst  performing  (40000041)  and  best  performing 
(40435651)  polynomials  observed  and  tnie  weight  distributions  at  block  length  n  =  32,  where 
they  showed  dramatic  differences  in  performance.  We  note  that  even  with  the  unrealistically 
large  percentage  of  total  code  words  sampled,  the  tails  of  the  distribution  were  represented 
inaccurately.  In  particular,  we  note  that  the  samples  displayed  here  tended  to  under  estimate 
the  number  of  code  words  of  low  weight  in  the  worst  code,  and  over  estimate  the  number  of 
code  words  of  low  weight  in  the  best  code.  In  Tables  1.  we  display  similar  charts  for  the 
other  polynomials  at  block  length  n  =  32,  in  order  of  their  erroi  detection  performance,  from 
worst  to  best.  In  Tables  2,  we  display  charts  for  the  worst  and  best  polynomial  at  block 
length  n  =  1024.  We  note  that  our  large  sample  failed  to  find  virtually  all  of  the  code  words  of 
the  lowest  hundred  weights  for  the  worst  code  at  block  length  n  =  1024. 

We  also  considered  modelling  the  weight  distribution  as  some  known  probability  distribution, 
using  higher  order  observed  statistics  such  as  sample  variance  as  parameters  to  predict  the 
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distribution  of  the  complete  set.  However,  we  found  wide  variations  in  the  sample  variances 
that  we  observed  that  did  not  correspond  to  performance  measure.  Table  3  compares  the 
observed  and  true  variance  of  the  24  bit  CRCs  at  block  length  it  =  32. 

polynomial  =  40000041 
block  length  »  32 


weight,  i 

bi 

sampled  b; 

ratio 

l 

9 

0 

2 

47 

0 

3 

199 

14 

14.214286 

4 

718 

44 

16.318182 

5 

2241 

247 

9.072874 

6 

6293 

744 

8.458333 

7 

16495 

2028 

8.133629 

8 

41624 

4761 

8.742701 

9 

102189 

11611 

8.801051 

10 

236583 

28279 

8.366031 

11 

491619 

59323 

8.287157 

12 

887378 

106157 

8.359110 

13 

1379029 

164485 

8.383920 

14 

1858325 

221242 

8.399513 

15 

2202523 

263142 

8.370093 

16 

2326670 

275848 

8.434609 

polynomial  *=  40435651 
block  length  =*  32 


weight,  i 

bi 

sampled  bj 

ratio 

2 

1 

0 

3 

25 

1 

25.000000 

4 

122 

19 

6.421053 

5 

761 

92 

8.271739 

6 

3603 

515 

6.996117 

7 

13146 

1757 

7.482072 

8 

40992 

5343 

7.672094 

9 

109850 

13415 

8.188595 

10 

252225 

30603 

8.241839 

11 

503127 

60515 

8.314087 

12 

881190 

105912 

8.320020 

13 

1358135 

162523 

8.356571 

14 

1843371 

216773 

8.503693 

15 

2209260 

262025 

8.431486 

16 

2345598 

281016 

8.346849 
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Table  1.  Sampled  Weight  Distributions  for  24  Bit  CRCs  at  Block  Length  n  =  32 
Weight  -  i  B;  Sampled  Bj  Ratio  (Bj/Sampled  B;) 


polynomial  =  40404041 

2 

31 

0 

3 

19 

0 

4 

424 

46 

9.217391 

5 

575 

58 

9.913793 

6 

6349 

833 

7.621849 

7 

12146 

1651 

7.356753 

8 

47756 

5859 

8.150879 

9 

110274 

12947 

8.517340 

10 

243679 

28869 

8.440854 

11 

506553 

60946 

8.311505 

12 

851672 

102356 

8.320685 

13 

1358229 

162058 

8.381129 

14 

1849141 

218780 

8.452057 

15 

2206508 

262636 

8.401392 

16 

2390502 

285924 

8.360620 

polynomial  =  40000063 

1 

9 

0 

2 

38 

0 

3 

118 

16 

7.375000 

4 

377 

56 

6.732143 

5 

1296 

164 

7.902439 

6 

4286 

455 

9.419780 

7 

13285 

1654 

8.032044 

8 

38734 

4630 

8.365875 

9 

103651 

12243 

8.466144 

10 

245858 

29491 

8.336713 

11 

505668 

59811 

8.454431 

12 

896375 

106366 

8.427270 

13 

1376086 

163966 

8.392508 

14 

1847994 

220876 

8.366658 

15 

2194191 

261953 

8.376277 

16 

2321282 

276640 

8.390985 

polynomial  =  50000241 

1 

5 

5 

1.000000 

2 

19 

9 

2.111111 

3 

65 

13 

5.000000 

4 

241 

29 

8.310345 

5 

939 

121 

7.760331 

6 

3709 

462 

8.028139 

7 

13143 

1602 

8.204120 

8 

40222 

4729 

8.505392 

9 

107645 

12603 

8.541220 

10 

250391 

29820 

8.396747 

11 

504537 

59851 

8.429884 

12 

886271 

105534 

8.397967 

13 

1363515 

162719 

8.379568 

14 

1844057 

219930 

8.384745 

15 

2204455 

263178 

8.376289 

16 

2338786 

278792 

8.389000 
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Weight  =  i 

Bi 

Sampled  B; 

Ratio  (B/Sampled  B;) 

polynomial  =  40010061 

1 

2 

0 

2 

14 

0 

3 

46 

0 

4 

204 

19 

10.736842 

5 

806 

114 

7.070175 

6 

3202 

402 

7.965174 

7 

12554 

1542 

8.141375 

8 

40788 

4582 

8.901790 

9 

110550 

12818 

8.624590 

10 

254886 

30687 

8.305993 

11 

505210 

60211 

8.390660 

12 

878196 

104756 

8.383253 

13 

1352434 

161143 

8.392757 

14 

1841098 

218790 

8.414909 

15 

2212702 

264280 

8.372567 

16 

2351830 

281314 

8.360160 

polynomial  -  40006341 

1 

3 

0 

2 

9 

0 

3 

26 

7 

3.714286 

4 

146 

23 

6.347826 

5 

832 

94 

8.851064 

6 

3483 

384 

9.070313 

7 

12735 

1356 

9.391593 

8 

40752 

4540 

8.976211 

9 

110025 

13105 

8.395651 

10 

253305 

29983 

8.448287 

11 

505484 

60124 

8.407358 

12 

881422 

104546 

8.430949 

13 

1352954 

160245 

8.443034 

14 

1838307 

218754 

8.403535 

15 

2212245 

265185 

8.342270 

16 

2353758 

283310 

8.308065 

polynomial  =  40220151 

2 

7 

0 

3 

24 

0 

4 

130 

28 

4.642857 

5 

824 

119 

6.924370 

6 

3501 

389 

9.000000 

7 

13008 

1600 

8.130000 

8 

41088 

5311 

7.736396 

9 

109136 

13489 

8.090741 

10 

252367 

30357 

8.313305 

11 

506632 

60451 

8.380870 

12 

881502 

104344 

8.448037 

13 

1352360 

161444 

8.376651 

14 

1841277 

218556 

8.424738 

15 

2212320 

263211 

8.405120 

16 

2348862 

281404 

8.346939 
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polynomial  =  41224445 


polynomial  =  40405463 


polynomial  =  40103271 


Weight  *  i 

Bi 

Sampled  B; 

Ratio  (Bj/Sampled  B;) 

2 

3 

0 

3 

28 

0 

4 

131 

3 

43.666667 

5 

796 

62 

12.838710 

6 

3573 

388 

9.208763 

7 

12952 

1538 

8.421326 

8 

40898 

4928 

8.299107 

9 

109976 

13331 

8.249644 

10 

252431 

29911 

8.439404 

11 

503972 

59599 

8.456048 

12 

881997 

105479 

8.361826 

13 

1356196 

161509 

8.397031 

14 

1840121 

219918 

8.367305 

15 

2210384 

263114 

8.400860 

16 

2350298 

280442 

8.380692 

2 

9 

0 

3 

10 

0 

4 

129 

17 

7.588235 

5 

778 

99 

7.858586 

6 

3567 

455 

7.839560 

n 

t 

13156 

1507 

8.729927 

8 

41086 

4713 

8.717590 

9 

109540 

13044 

8.397731 

10 

251645 

30186 

8.336480 

11 

504982 

60590 

8.334412 

12 

882287 

105141 

8.391465 

13 

1354390 

161634 

8.379363 

14 

1842955 

219919 

8.380154 

15 

2211448 

263101 

8.405320 

16 

2345250 

279190 

8.400193 

2 

6 

0 

3 

14 

0 

4 

121 

8 

15.125000 

5 

774 

93 

8.322581 

6 

3574 

413 

8.653753 

7 

13332 

1619 

8.234713 

8 

40926 

4875 

8.395077 

9 

109108 

12963 

8.416879 

10 

252410 

29694 

8.500370 

11 

504362 

59445 

8.484515 

12 

881975 

105440 

8.364710 

13 

1357058 

162036 

8.375040 

14 

1840138 

219690 

8.376066 

15 

2209656 

263612 

8.382228 

16 

2350306 

280226 

8.387180 
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Table  2.  Sampled  Weight  Distributions  for  24  Bit  CRCs  at  Block  Length  n  =  1024 


Weight  =  i  Bj 


polynomial  =  40000041  335  S 

336  23 

337  17 

338  24 

339  14 

340  11 

341  13 

342  23 

343  22 

344  19 

345  20 

346  8 

347  5 

348  9 

349  13 

350  6 

351  8 

352  7 

353  4 

354  7 

355  12 

356  6 

357  6 

358  12 

359  8 

360  5 

361  7 

362  4 

363  7 

364  14 

365  7 

366  IS 

367  34 

368  35 

369  31 

370  30 

371  39 

372  20 

373  29 

374  25 

375  14 

376  5 

377  7 

378  3 

379  3 

380  6 

381  4 

382  9 

383  18 

384  24 

385  8 

386  4 

387  4 

388  3 

389  4 

390  14 

391  9 

392  7 

393  6 


Sampled  B;  Ratio  (B/Sampled  B;) 

o 

o 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 
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40000041 


Weight  =  i 

BS 

Sampled  B; 

Ratio  (Bj/Sampled  Bj) 

394 

8 
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0 
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0 
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416 
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0 
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0 
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0 
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0 
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0 
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0 
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0 
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0 
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514 

0 
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2 
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10 

56.700000 
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650 

8 

81.250000 
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15 

45.933333 

439 
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31 

23.903226 
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34 

23.147059 

441 
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51 

17.705882 

442 
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28 

33.071429 
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51 

20.823529 
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1222 

76 
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445 
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14.250000 
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141 
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11.169492 
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12.010417 
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2377 

181 
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2364 
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Weight  =  i 

Bi 

Sampled  B; 

Ratio  (Bj/Sampled  B;) 

polynomial  =  40000041  4SS 

2642 

170 

15.541176 

4S6 

2707 

195 

13.882051 

457 

2929 

260 

11.265385 

458 

3239 

340 

9.526471 

459 

3604 

405 

8.898765 

460 

3888 

447 

8.697987 

461 

4519 

561 

8.055258 

462 

4901 

585 

8.377778 

463 

5664 

627 

9.033493 

464 

6124 

653 

9.378254 

465 

6886 

667 

10.323838 

466 

7673 

809 

9.484549 

467 

8845 

973 

9.090442 

468 

9665 

1060 

9.117925 

469 

10913 

1271 

8.586153 

470 

12350 

1478 

8.355886 

471 

13223 

1458 

9.069273 
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14280 

1512 

9.444444 

473 

15859 

1795 

8.835097 

474 

17878 

2169 

8.242508 

475 

21010 

2618 

8.025210 
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24427 
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7.708110 
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27631 

3565 

7.750631 

478 

31546 

3881 

8.128317 

479 

35932 

4356 

8.248852 

480 

41384 

4838 

8.553948 

481 

46773 

5395 

8.669694 

482 

54250 

6001 

9.040160 

483 

61639 

7058 
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484 

70219 

7983 

8.796067 

485 

81368 

9638 
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486 
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11558 
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13213 
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488 
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14963 
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489 
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8.041554 

490 

152584 
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8.086063 
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168140 

20965 
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492 
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8.055201 

493 

202442 

25336 

7.990290 

494 

220183 

27422 

8.029429 

495 

237707 

29508 

8.055680 

496 

256835 

31222 

8.226091 

497 

274892 

33545 

8.194724 

498 

292629 

36481 

8.021408 

499 

311050 

38306 

8.120138 

500 

326600 

39762 

8.213873 

SOI 

344840 

41364 

8.336718 

502 

360291 

42596 

8.458329 

503 

371886 

44376 

8.380341 

504 

384627 

45530 

8.447771 

505 

398836 

47277 

8.436153 

506 

407794 

48032 

8.490048 

507 

416347 

48932 

8.508686 

508 

422590 

49351 

8.562947 

509 

425809 

49440 

C.612642 

510 

429997 

49307 

8.720810 

511 

433246 

49787 

8.701990 

512 

435328 

50122 

8.685368 
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0 
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3 

0 

448 

9 

3 
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42 

19 
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98 

47 

2.085106 

451 
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60 
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452 
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39 

5.076923 

453 

349 

39 

8.948718 
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440 

46 

9.565217 

455 
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53 

9.962264 

456 

809 

56 

14.446429 

457 

992 

88 

11.272727 

458 

1145 

127 

9.015748 

459 

1416 

147 

9.632653 

460 

1900 

201 

9.452736 

461 

2285 

264 

8.655303 

462 

2851 

264 

10.799242 
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3606 

398 

9.060302 

464 

4419 
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8.664706 
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5356 

589 

9.093379 
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6485 
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9.915902 
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468 

9775 
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8.152627 
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1434 
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1794 
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2086 
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18580 
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8.228521 

473 

21610 

2685 

8.048417 
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3144 

7.951972 
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28624 

3S37 

8.092734 
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33089 

4097 

8.076397 

477 

37711 

4452 

8.470575 

478 

43851 

5322 

8.239572 

479 

50211 

6381 

7.868829 

480 

56689 

7279 

7.788020 

481 

64526 

8463 

7.624483 

482 

73592 

9733 

7.561081 

483 

82756 

10670 

7.755951 

484 

92279 

11460 

8.052269 
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103536 

12922 

8.012382 
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112560 

14057 

8.007398 

487 

123787 

15282 

8.100183 
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135715 

16700 

8.126647 

489 

150118 

18543 

8.095670 
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164676 
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8.160357 
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178776 
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8.118064 
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192944 

23804 

8.105528 
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209033 

25506 

8.195444 
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8.173383 

495 

238930 

29136 

8.200508 
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267167 
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8.291190 

498 

283347 

34514 

8.209625 

499 

299062 

36358 

8.225480 

SOO 

317179 

38524 

8.233283 

501 

331770 

39890 

8.317122 

502 

344763 

41180 

8.372098 

503 

355956 

41854 

8.504707 

504 

367040 

42898 

8.556110 
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377846 

44339 

8.521753 
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387904 
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508 

402684 
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509 

408S47 

46369 
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Table  3.  Variance  of  Sample  Weight  Distributions  for  24  Bit  CRCs 

at  Block  Length  n  =  32 

Sample  Variances 


Sample  Size  =  20000 

Sample  Size  =  2000000 

ALL 

Polynomial 

40000041 

15.335 

15.958 

16.0 

40404041 

15.005 

16.074 

16.0 

40000063 

16.583 

15.973 

16.0 

50000241 

18.394 

15.972 

16.0 

40010061 

15.981 

15.957 

16.0 

40006341 

15.903 

15.869 

16.0 

40220151 

16.366 

16.104 

16.0 

41224445 

15.151 

15.981 

16.0 

40405463 

16.068 

16.008 

16.0 

40103271 

16.415 

15.950 

16.0 

40435651 

15.202 

16.216 

16.0 
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VI.  HARDWARE  TESTER  FOR  CRC  CODES 

'rhe  sampling  results  of  the  previous  section  convince  us  that  to  properly  evaluate  a  given 
CRC  code  we  have  to  enumerate  the  weights  of  all  code  words.  In  order  to  reasonably 
evaluate  a  larger  number  of  32  bit  and  larger  CRCs  at  a  variety  of  moderate  block  lengths,  we 
estimate  that  we  must  increase  our  weight  enumeration  capability  by  at  least  a  factor  of  ten. 
We  therefore  sought  a  cost  effective  alternative  to  the  purchase  of  ten  times  the  computers 
and  associated  labor  hours  involved. 

In  this  section,  we  informally  propose  specialized  hardware  that  would  efficiently  determine 
the  weight  enumerators  of  a  CRC  code  at  moderate  block  lengths.  We  intend  to  formalize 
this  proposal  for  a  Phase  Two  continuation  of  the  project. 

The  optimized  assembler  code  of  section  IV  gives  us  a  good  estimate  of  the  number  of 
machine  cycles  required  by  a  particular  general  purpose  microprocessor  to  produce  the  weight 
enumerators.  The  main  loop  requires  approximately  25  machine  cycles  per  iteration  (68030, 
cache  case).  By  producing  specialized  hardware  that  would  require  only  1  machine  cycle  per 
iteration,  we  should  be  able  to  gain  a  factor  of  25  in  execution  time  for  the  same  cycle 
frequency.  Additionally,  if  we  produce  hardware  in  a  faster  logic  family  than  CMOS,  such  as 
ECL,  there  should  be  additional  gains  to  be  made. 

Figure  6  is  a  block  diagram  of  the  contemplated  hardware.  We  envision  a  personal  computer 
as  the  interface  between  the  user  and  the  specialized  weight  enumerator  circuitry.  A 
controller  card  in  the  PC  would  enable  it  to  download  the  parameters  of  the  code  to  be 
analyzed  to  the  specialized  hardware,  which  would  be  implemented  in  ECL.  The 
programmable  shift  registers  would  play  the  rote  of  Ifsrl  and  lfsr2  in  the  assembly  code.  Two 
counters  would  be  employed  to  count  out  the  n  bits  of  the  first  code  word  and  accumulate  its 
weight.  The  main  loop  of  the  algorithm  would  involve  shifting  both  registers,  producing  the 
next  weight,  and  updating  a  weight  enumerator  in  RAM  once  per  cycle.  A  relatively  simple 
state  machine  whose  modes  of  operation  are  shown  in  Figure  7  would  control  the  weight 
enumeration  without  intervention  from  the  controller.  When  the  weight  enumeration  is 
complete,  the  ECL  circuitry  would  alert  the  controller  to  collect  the  weight  enumerators  and 
issue  the  parameters  of  the  next  code.  While  the  weight  enumeration  of  the  next  code 
proceeds,  the  personal  computer  would  be  free  to  (comparatively  slowly)  evaluate  the  error 
detection  capability  of  the  given  code. 
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Figure  7.  Hardware  Modes  of  Operation 
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VII.  EVALUATION  OF  8  BIT  CRCS 


We  used  Peterson  and  Weldon  (5 1  as  a  reference  which  supplies  all  primitive  irreducible 
polynomials  of  degree  £  16.  With  CRCs  of  the  form  (x  +  1)  p(x).  a  given  primitive  irreducible 
polynomial  p(x)  and  its  (primitive  irreducible)  reciprocal  polynomial  perform  identically  as 
error  detection  codes.  We  therefore  test  and  list,  as  in  (5),  only  one  of  any  pair  of  a 

polynomial  and  its  reciprocal.  We  list  the  polynomials,  as  in  [51,  using  octal  notation.  For 
example,  the  notation 


3525 


in  octal  is  converted  to  binary 
011  101010  101 
and  represents  the  polynomial 

p(x) «  x10  +  x9  +  x8  +  x6  +  x4  +  x2  +  1. 


The  reciprocal  polynomial  is  2527. 

8  bit  CRCs  based  on  the  nine  primitive  irreducible  polynomials  in  [51  were  tested  at  all  block 
lengths  from  n  =  9  to  n  =  127.  At  each  block  length,  the  probability  of  undetected  error  was 
evaluated  for  twenty  logunthmically  spaced  values  in  each  decade  for  p,  from  p  =  l(H  to  p  * 
1/2.  Any  polynomials  found  to  be  improper  at  any  of  these  values  was  rejected. 

Degree  7  polynomials  p(x)  which  produce  proper  8  bit  CRCs  of  the  form  (x  +  I)  p(x)  over  the 
range  of  all  block  lengths  considered  are 

211  235  325  313  345, 


and  their  reciprocal  polynomials. 


VIII.  EVALUATION  OF  16  BIT  CRCS 


As  in  section  VII,  we  started  with  an  exhaustive  list  of  nearly  1000  primitive  polynomials  of 
degree  15  from  Peterson  and  Weldon.  16  bit  CRCs  based  on  the  primitive  irreducible 
polynomials  in  [5]  were  tested  at  ail  block  lengths  from  n  =  17  to  n  =  32767.  At  each  block 
length,  the  probability  of  undetected  error  was  evaluated  for  twenty  logarithmically  spaced 
values  in  each  decade  for  p.  from  p  =  10*6  to  p  =  1/2.  Any  polynomials  found  to  be  improper  at 
any  of  these  values  was  rejected. 

Degree  15  polynomials  p(x)  which  produce  proper  16  bit  CRCs  of  the  form  (x  +  I)  p(x)  over 
the  range  of  all  block  lengths  considered  are 


103451 

112611 

115155 

102561 

134531 

142305 

103145 

1 12273 

114273 

123023 

160521 

132367 

156333 

127143 

151043 

153143 

172213 

105213 

120447 

117511 

115141 

165033 

110427 

131211 

160511 

153731 

144275 

134447 

132103 

165355 

150243 

141655 

124243 

147321 

150225 

1 15307 

157241 

166541 

102513 

113255 

133571 

112407 

165113 

135751 

101661 

113373 

141151 

130305 

121355 

134325 

124647 

113645 

156635 

150633 

146025 

111423 

132127 

135267 

146727 

154545 

133553 

171131 

112365 

175515 

132507 

102615 

105713 

134241 

115523 

164447 

115537 

125471 

106251 

106611 

102471 

162455 

162153 

133113 

161205 

132357 

137061 

112347 

165535 

146753 

155303 

141115 

144425 

141231 

143271 

120463 

110435 

126155 

141445 

126711 

107645 

163365 

l 64 I 55 

1 10405 

104111 

123735 

135443 

162315 

146155 

121641 

131667 

152351 

145433 

134435 

116631 

154515 

171115 

1 10255 

125537 

154507 

155027 

105143 

164313 

121327 

124335 

154155 

142751 

121553 

121305 

170325 

135565 

155725 

162241 

101551 

146705 

117243 

134205 

161465 

144713 

171125 

133011 

165565 

127071 

127457 

165303 

105415 

144225 

101515 

166267 

117131 

144151 

150327 

163123 

106633 

116645 

104427 

115271 

142457 

156321 

175651 

116675 

111243 

163273 

102265 

112553 

167331 

164S61 

105071 

154233 

166113 

115667 

122123 

164453 

155335 

114231 

106445 

133257 

110165 

163555 

105237 

130635 

134165 

1 15373 

166653 

144467 

135523 

131367 

143227 

111267 

165633 

130745 

131623, 

and  their  reciprocals. 

We  note  that  most  polynomials  were  rejected  at  relatively  short  block  lengths  (<  n  =  250), 
and  that  only  one  polynomial  was  rejected  in  the  range  1000  £  n  <,  2000.  No  polynomials 
which  survived  to  n  =  2000  were  later  rejected.  We  also  note  that  neither  of  the  standard  16 
bit  CRCs,  CRC-16  generated  from  100003  nor  CRC-CC1TT  generated  from  170037,  is  proper 
at  all  block  lengths. 


In  Figures  8,  9,  and  10  we  plot  the  error  detection  performance  of  16  bit  CRCs  based  on  four 
of  the  primitive  polynomials  from  the  chart  at  block  lengths  256,  1024,  and  4096,  respectively. 
The  performance  of  all  four  codes  was  nearly  identical. 
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In  all  the  graphs,  we  reference  a  given  plot  with  the  notation  Mxxxx"-"yyy",  where  xxxx  is  the 
octal  representation  of  the  primitive  polynomial  p(x)  used  to  produce  a  CRC  of  the  form  (x  + 
1)  p(x),  and  yyy  is  the  block  length  n  under  consideration. 


16  Bit  CRCs  at  Block  Length  =  256 


Figure  8.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  16  bit 

CRCs  at  block  length  n  =  256. 


Probability  of  Undetected  Block  Error 
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Probability  of  Bit  Error 


Figure  9.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  16  bit 

CRCs  at  block  length  n  =  1024. 
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16  Bit  CRCs  at  Block  Length  =  4096 


Figure  10.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  16  bit 

CRCs  at  block  length  n  =  4096. 


IX.  EVALUATION  OF  24  BIT  CRCS 


As  in  section  VIII,  we  started  with  the  list  of  primitive  polynomials  of  degree  23  from 
Peterson  and  Weldon.  The  list  contains  a  total  of  1 1  polynomials.  24  bit  CRCs  based  on  the 
primitive  irreducible  polynomials  in  [5]  were  tested  at  all  block  lengths  from  n  =  25  to  n  = 
4000.  At  each  block  length,  the  probability  of  undetected  error  was  evaluated  for  twenty 
logarithmically  spaced  values  in  each  decade  for  p,  from  p  =  10*6  to  p  =  1/2. 

We  were  immediately  able  to  reject  all  but  one  of  the  polynomials  as  improper  at  short  block 
lengths,  as  is  demonstrated  in  Figure  11.  The  remaining  polynomial,  generated  from 
40435651,  was  tested  extensively,  since  we  propose  this  polynomial  to  generate  a  new 
standard  CRC-24Q.  The  polynomial  was  tested  at  all  blocks  lengths  up  to  4000,  and  at  block 
lengths  4096,  8192,  16384,  and  32767.  The  polynomial  displayed  a  very  slight  rise  in  P^fp) 
that  was  less  than  0.1%  above  the  value  of  Pud(l/2)  at  a  few  block  lengths,  which  we  find  to 
be  very  minor  and  unworthy  of  rejection. 

In  Figures  1 1  through  14,  we  have  plotted  the  probability  of  undetected  error  versus  the 
probability  of  bit  error  for  all  24  bit  CRCs  generated  from  the  polynomials  of  15],  at  block 
lengths  32,  256,  1024,  and  4096,  respectively.  We  note  that  in  the  first  two  figures,  the 
dramatic  difference  in  error  detection  performance  of  shortened  CRCs  is  depicted.  We  also 
note  that  it  is  insufficient  to  predict  the  performance  of  a  given  shortened  CRC  by  sampling  its 
performance  at  a  given  block  length,  such  as  4096,  where  all  the  polynomials  appear  to 
perform  nearly  identically. 

In  Figure  15,  we  have  plotted  the  performance  of  the  new  proposed  standard  CRC-24Q,  at  a 
variety  of  blocklengths  up  to  32,767.  We  note  its  nearly  uniform  performance  over  this  range 
with  respect  to  propriety. 
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Figure  11.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  24  bit 

CRCs  at  block  length  n  =  32. 
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24  Bit  CRCs  at  Block  Length  =  256 
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Figure  12.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  24  bit 

CRCs  at  block  length  n  =  256. 
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24  Bit  CRCs  at  Block  Length  =  1024 
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Figure  13.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  24  bit 

CRCs  at  block  length  n  =  1024. 
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Figure  14.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  24  bit 

CRCs  at  Mock  length  n  =  4096. 
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Performance  of  CRC  -  24  Q  at  Various  Block  Lengths 
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Figure  15.  Probability  of  undetected  Mock  error  vs.  probability  of  Mt  error  for 

CRC-24Q  at  various  Mock  lengths. 
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X.  EVALUATION  OF  32  BIT  CRCS 

As  in  section  IX,  we  tested  32  bit  CRCs  generated  from  the  degree  31  primitive  irreducible 
polynomials  listed  in  Peterson  and  Weldon  IS).  The  list  contains  a  total  of  1 1  polynomials. 
However,  because  of  time  limitations  we  were  not  able  to  test  these  32  bit  CRCs  extensively 
at  a  large  number  of  block  lengths.  At  each  block  length  that  we  did  test  at,  the  probability  of 
undetected  error  was  evaluated  for  twenty  logarithmically  spaced  values  in  each  decade  for  p, 
from  p  =  10"6  to  p  =  1/2. 

We  were  able  to  reject  all  but  one  of  the  polynomials  as  being  significantly  improper  at  some 
block  length  tested.  The  lone  survivor  is  the  32  bit  CRC,  CRC-32Q  generated  from  the 
primitive  polynomial  20060140231. 

In  Figure  16,  we  plot  the  error  detection  performance  of  32  bit  CRCs  generated  from  the  1 1 
polynomials  considered  at  block  length  1024.  In  Figures  17,  18,  we  plot  the  performance  of 
32  bit  CRCs  generated  from  the  best  three  of  these  polynomials,  which  is  indistinguishable  in 
Figure  16,  at  block  lengths  256  and  4096,  respectively. 
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Figure  16.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  32  bit 

CRCs  at  block  length  n  =  1024. 
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Figure  17.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  32  bit 

CRCs  at  block  length  n  =  256. 
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The  Best  32  Bit  CRCs  Tested  at  Block  Length  =  4096 
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Figure  18.  Probability  of  undetected  block  error  vs.  probability  of  bit  error  for  32  bit 

CRCs  at  block  length  n  =  4096. 
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XI.  CONCLUSION 

In  this  report,  we  summarize  the  results  of  a  Phase  I  study  of  the  error  detection  capability  of 
shortened  CRC  codes  of  the  form  (x  +  l)p(x).  where  p(x)  is  a  primitive  irreducible 
polynomial.  The  evaluation  algorithm  used  and  its  optimization  in  software  is  explained  in 
detail. 

Wc  conclude  that,  for  moderate  redundancy  CRCs,  it  is  reasonable  to  distinguish  those  CRCs 
which  will  guarantee  a  certain  degree  of  error  detection  capability  in  the  presence  of  random 
bit  errors  at  all  shortened  block  lengths  from  those  CRCs  which  exhibit  anomalies  in  their 
error  detection  performance  at  shortened  block  lengths  using  our  algorithm.  In  section  VU1, 
wc  give  an  exhaustive  list  of  16  bit  CRCs  which  are  proper  at  all  shortened  block  lengths. 

As  the  number  of  redundant  bits  increases,  it  becomes  more  difficult  to  completely  evaluate 
all  choices  of  primitive  polynomials  at  nil  block  lengths.  We  have  demonstrated,  however, 
that  it  is  feasible  to  examine  specific  polynomials,  eliminate  improper  CRCs.  and  find  CRCs 
which  perform  well  at  a  wide  variety  of  block  lengths.  Specifically,  in  section  IX  we 
recommend  ns  a  potential  new  standard  a  24  bit  CRC,  CRC-24Q,  which  has  been  extensively 
tested. 

We  also  report  on  some  unfavorable  results  which  seem  to  indicate  that  it  is  not  possible  to 
make  accurate  projection  of  the  error  detection  performance  of  shortened  CRC  codes  based  on 
a  small  sample  of  their  code  words. 

Finally,  we  give  an  informal  proposal  for  an  improved  shortened  CRC  cotie  evaluator,  which 
would  enable  us  to  more  thoroughly  examine  CRCs  with  a  large  number  of  redundant  bits, 
based  on  building  specialized  hardware. 
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